Please note that this site has updated features that do not run on older versions of Internet Explorer. For an optimal experience, please use another browser or the most recent version of IE.

Sr. Security Engineer in Shanghai at PayPal

Date Posted: 3/5/2020

Job Snapshot

Job Description

Fueled by a fundamental belief that having access to financial services creates opportunity, PayPal (NASDAQ: PYPL) is committed to democratizing financial services and empowering people and businesses to join and thrive in the global economy. Our open digital payments platform gives PayPal’s 305 million active account holders the confidence to connect and transact in new and powerful ways, whether they are online, on a mobile device, in an app, or in person. Through a combination of technological innovation and strategic partnerships, PayPal creates better ways to manage and move money, and offers choice and flexibility when sending payments, paying or getting paid. Available in more than 200 markets around the world, the PayPal platform, including Braintree, Venmo and Xoom enables consumers and merchants to receive money in more than 100 currencies, withdraw funds in 56 currencies and hold balances in their PayPal accounts in 25 currencies.

We seek a talented engineer to work on data security. The responsibilities include initializing / configuring / maintaining a cluster of Trusted Path (FIPS 140-2 Level 3) HSMs. They also include implementing policies for managing hardware keys, application partitions, Cryptoki roles, and implementing an authentication for these roles. A critical aspect of the work will involve designing and scaling a high availability architecture for the cluster along with addressing backup and disaster recovery concerns. onboarding new certificate types by designing CA hierarchies and certificate profiles, providing technical guidance on digital certificates, cryptographic keys, and other cryptographic services, and providing training and technical guidance to key stakeholders on PKI processes and procedures.

  • Required Skills
    • 5+ years of experience in data security
    • Experience of using HSM and KMS
    • Solid command of PKI concepts with a demonstrable understanding of x509 certificate fields and extensions and when and why to use each one
    • Ability to use OpenSSL or other utilities to create and analyze certificates, CRLs, and OCSP responses
    • Experience integrating digital certificates with applications and services
    • Experience managing complex projects simultaneously
    • Experience operating within a WebTrust-compliant control environment is a plus
    • Experience with configuring and operating an HSM cluster of commercial HSMs
    • Experience with designing, implementing and scaling high availability HSM architectures .
    • Understanding of cryptography
    • Experience implementing backup and recovery processes for large HSM clusters

We're a purpose-driven company whose beliefs are the foundation for how we conduct business every day. We hold ourselves to our One Team Behaviors which demand that we hold the highest ethical standards, to empower an open and diverse workplace, and strive to treat everyone who is touched by our business with dignity and respect. Our employees challenge the status quo, ask questions, and find solutions. We want to break down barriers to financial empowerment. Join us as we change the way the world defines financial freedom.

PayPal provides equal employment opportunity (EEO) to all persons regardless of age, color, national origin, citizenship status, physical or mental disability, race, religion, creed, gender, sex, pregnancy, sexual orientation, gender identity and/or expression, genetic information, marital status, status with regard to public assistance, veteran status, or any other characteristic protected by federal, state or local law. In addition, PayPal will provide reasonable accommodations for qualified individuals with disabilities. If you are unable to submit an application because of incompatible assistive technology or a disability, please contact us at